CVE-2023-45128 (fiber)

Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to inject arbitrary values and forge malicious requests on behalf of a user. This vulnerability can allow an attacker to inject arbitrary values without any authentication, or perform various malicious actions on behalf of an authenticated user, potentially compromising the security and integrity of the application. The vulnerability is caused by improper validation and …

actions application attacker authentication cross-site cross-site request forgery csrf cve express fiber forge forgery framework inject malicious request requests vulnerability web written